Nura Privacy Policy
Effective Date: January 1, 2025
Version 1.0
Our Privacy Promise
Your health data belongs to you, and only you.
We created Nura because we believe medication tracking shouldn't require sacrificing your privacy. Unlike other health apps that collect, analyze, and monetize your personal information, Nura is designed from the ground up to keep your data private, secure, and under your complete control.
The short version:
- Your medication data stays on your device
- We cannot see what medications you take
- We do not sell, share, or monetize your data
- No account or personal information required
- Works completely offline
1. Information We Collect
1.1 Information You Provide
When you use Nura, you may enter the following information into the app:
| Data Type | Examples | Purpose |
|---|---|---|
| Routine names | "Morning vitamin," "Daily supplement" | Identifying your tracked items |
| Amounts | "1 capsule," "50mg" | Displaying dosage information |
| Schedules | Times, days of week, frequency | Sending reminders |
| Log entries | Taken, skipped, snoozed timestamps | Tracking your history |
| Notes | "Take with food" | Personal reminders |
| Icons | Visual identifiers you select | Display preferences |
Types of information you provide to Nura
Important: All of this information is stored locally on your device. We do not have access to it, cannot read it, and never transmit it to our servers.
1.2 Information Collected Automatically
Nura collects minimal technical information to ensure the app functions properly:
| Data Type | What It Is | Why We Need It |
|---|---|---|
| Device timezone | Your current timezone setting | Scheduling accurate reminders |
| App version | Which version of Nura you're using | Ensuring compatibility |
| Device type | iPhone model, iOS version | Optimizing performance |
Automatically collected technical data
Note on crash reports: iOS may collect crash reports at the system level if you have enabled "Share iPhone Analytics" in Settings → Privacy → Analytics. This is controlled by Apple, not Nura, and never includes your medication data or health information.
2. Information We Do NOT Collect
To be absolutely clear, Nura never collects, accesses, or transmits:
- -Your name, email, or contact information
- -Your Apple ID or any account credentials
- -The names of medications or supplements you track
- -Your dosage information
- -When you take your medications
- -Whether you skip or miss doses
- -Any health conditions or diagnoses
- -Your location
- -Your contacts, calendars, or photos
- -Your browsing history
- -Advertising identifiers (IDFA)
- -Any biometric data (Face ID/Touch ID data stays in iOS Secure Enclave)
We have designed Nura so that we technically cannot access your health data. Your information is encrypted on your device using keys that only your device possesses.
3. How Your Data Is Stored
3.1 Local-Only Architecture
All your routine and medication data is stored exclusively on your device using Apple's secure storage systems. Your data never leaves your device.
Nura uses the following Apple technologies for data storage:
- -SQLite Database: Your routines, schedules, and history are stored in a local database on your device
- -iOS Data Protection: Your database is automatically encrypted by iOS when your device is locked
- -Keychain Services: Encryption keys are stored in iOS Keychain with hardware-backed protection
- -Secure Enclave: On supported devices, cryptographic operations use Apple's Secure Enclave processor
3.2 Backup Behavior
iCloud/iTunes Backup: If you back up your iPhone to iCloud or your computer, your Nura data may be included in that backup. This backup is encrypted by Apple (iCloud) or your backup password (iTunes/Finder), under your control, not ours, and restorable only to devices signed into your Apple ID.
4. How Your Data Is Protected
Nura implements multiple layers of encryption:
| Layer | Technology | Protection Level |
|---|---|---|
| At Rest | iOS Data Protection API | Data encrypted when device locked |
| Application | Apple CryptoKit (AES-256) | Additional encryption of sensitive fields |
| Database | SQLite Encryption Extension | Full database encryption |
| Keys | iOS Keychain + Secure Enclave | Hardware-backed key protection |
Encryption layers in Nura
App Lock: Nura supports optional app lock using Face ID, Touch ID, or device passcode. When enabled, the app requires authentication before displaying any data. Biometric data is processed entirely by iOS and never accessed by Nura.
Our architecture follows zero-knowledge principles: data minimization, local processing, no telemetry, no analytics on health data, and secure deletion when you delete data in Nura.
5. Data Sharing and Third Parties
5.1 We Do Not Share Your Data
Nura does not share, sell, rent, or trade your personal information or health data with any third parties. This includes pharmaceutical companies, healthcare providers, insurance companies, advertisers, data brokers, marketing partners, research institutions, or government agencies (see Section 13.2 for legal exceptions).
5.2 Third-Party Services We Use
Nura uses the following third-party services, which have limited access to technical (non-health) data:
| Service | Purpose | Data Accessed |
|---|---|---|
| Apple App Store | App distribution | App download statistics |
| Apple StoreKit | In-app purchases | Purchase verification tokens |
| Adapty | Subscription management | Subscription status, purchase receipts |
| iOS Crash Reports | System-level diagnostics | Technical logs (via iOS Settings) |
Third-party services used by Nura
About Adapty: Adapty is our subscription management partner that communicates with Apple App Store and Google Play Store to verify purchases. Adapty does not have access to your health data.
About iOS Crash Reports: Crash reports are collected by Apple at the iOS system level, not by Nura. You can control this in your device's Settings → Privacy → Analytics & Improvements.
None of these services have access to your medication data, routines, schedules, or health information.
5.3 No Advertising
Nura does not display advertisements of any kind. We do not show banner, interstitial, or video ads; partner with ad networks; collect advertising identifiers; or share data with advertisers. Our business model is simple: we charge for premium features. We do not monetize your data.
6. Your Rights and Controls
You have complete control over your data in Nura:
| Right | How to Exercise It |
|---|---|
| Access | View all your data directly in the app |
| Modify | Edit any entry at any time |
| Delete | Delete individual items or all data |
Your data rights in Nura
Deleting Your Data: Navigate to any item and tap Edit → Delete, or go to Settings → Privacy → Delete All Data. When you delete data, it is immediately removed, cryptographically erased, and cannot be recovered.
Data Retention: Since your data is stored locally and we don't have access to it, we retain nothing. You control retention. Uninstalling deletes everything.
No Account Required: Nura does not require account creation—no email verification, no password, no personal information to provide. If you use Nura Premium, your subscription is tied to your Apple ID (managed by Apple), not a Nura account.
8. Notifications and Permissions
Nura requests notification permission to send medication reminders. Notification content respects your iOS privacy settings, and you can configure whether content shows on lock screen. We don't track which notifications you interact with. Notifications are scheduled locally, not pushed from servers.
Notification Privacy Levels: Nura offers three levels in Settings → Notifications → Privacy Level:
| Level | What Appears on Lock Screen |
|---|---|
| Maximum | "Daily reminder" (no routine name) |
| Standard | "Time for your morning routine" |
| Detailed | "Time for [Routine Name]" |
Notification privacy levels
Other Permissions: Face ID/Touch ID (optional, for app lock). We will never request access to your contacts, photos, microphone, camera, location, or calendar.
9. Children's Privacy
Nura is intended for users age 13 and older. We are designed to comply with COPPA: we do not knowingly collect personal information from children under 13, do not require any personal information to use the app, contain no advertising, and have no social features or user-generated content shared publicly.
If a parent or guardian wishes to use Nura to manage a child's medication routine, they should set up and control the app. No personal information about the child is transmitted to us. If you believe a child under 13 has provided personal information through our support channels, please contact us at privacy@yc-studios.dev.
10. International Users
Nura is developed by yc-studios, operating from Israel. Because we use local-only architecture, no data is transferred to our servers regardless of your location, and no international data transfers occur for your health data.
10.1 European Users (GDPR)
If you are in the EEA, UK, or Switzerland, you have rights under GDPR:
| Right | Implementation |
|---|---|
| Right to Access | All data visible directly in-app |
| Right to Rectification | Edit any data at any time |
| Right to Erasure | Delete individual items or all data |
| Right to Restriction | You control all data processing locally |
| Right to Object | No profiling or automated decisions made |
GDPR rights implementation
Data Controller: For GDPR purposes, yc-studios is the data controller for technical data we collect. You are the data controller for your health data, as it never leaves your device.
10.2 California Users (CCPA/CPRA)
If you are a California resident, you have rights under CCPA/CPRA:
- -Right to Know: We've disclosed all data collection in this policy
- -Right to Delete: Delete your data in Settings → Privacy → Delete All Data
- -Right to Opt-Out of Sale: We do not sell personal information. Ever.
- -Right to Non-Discrimination: We don't discriminate based on privacy choices
11. Changes to This Policy
We may update this privacy policy from time to time. When we do, we'll update the "Last Updated" date at the top. For significant changes (new categories of data collection, new third-party data sharing, changes to data retention, modifications to your rights), we'll notify you in the app and provide a 30-day notice period.
If you continue using Nura after a policy update, you accept the updated terms. If you disagree with changes, you may delete your data and uninstall the app.
12. Contact Us
Privacy Questions: privacy@yc-studios.dev (response within 5 business days)
General Support: support@yc-studios.dev or Settings → Help & Support → Contact Us
Company: yc-studios, Israel
13. Legal Disclosures
13.1 HIPAA Disclaimer
Nura is a personal wellness and reminder application. Nura is not a covered entity under HIPAA because we are not a healthcare provider, do not handle insurance claims, do not receive data from healthcare entities, and have no access to your health data.
13.2 Law Enforcement
Because of our local-only architecture, we cannot comply with data requests for your medication information because we don't have it. We have no server logs of your health data. Your data exists only on your device. However, we may be required to provide technical information about the app, confirm subscription status, or comply with valid legal process for data we do possess.
13.3 Security Breach Notification
In the unlikely event of a security breach, we will notify affected users within 72 hours, provide details about what data was affected, report to relevant supervisory authorities, and explain steps to address the issue. Because health data is stored locally and encrypted on your device, a breach of our infrastructure would not expose your medication information.
13.4 Medical Disclaimer
Nura is a reminder and tracking tool, not a medical device. Nura does not provide medical advice, diagnose conditions, recommend treatments, or substitute for professional healthcare. Always consult your healthcare provider about medication questions.
Summary
| Question | Answer |
|---|---|
| What data do you collect? | Routine names, schedules, and logs—stored locally only |
| Can you see my medications? | No. We cannot access your data. |
| Do you sell my data? | Never. We don't monetize your data in any way. |
| Do I need an account? | No. No email, password, or personal info required. |
| Where is my data stored? | Only on your device, encrypted. |
| What happens if I delete the app? | All data is deleted. We have no backup. |
| Does premium change privacy? | No. Same privacy protection, more features. |
| Do you show ads? | Never. No ads, no tracking. |
| Is my data encrypted? | Yes. Multiple layers of encryption. |
Privacy policy summary
Thank you for trusting Nura with your wellness routine.
Your data. Your device. Your control.
© 2025 yc-studios. All rights reserved.